Removing Admin from Admins grp and /user switch required

  • Thread starter Thread starter Nick HK
  • Start date Start date
N

Nick HK

After reading the MS FAQ and Jack MacDonald's words of wisdom, security was
accomplished, but with 2 work arounds (using Access 2000):

1. It appeared impossible to actually remove Admin from the Admins group,
despite what the .MDW was telling me. Removal of all permissions from the
Admins group solved it, but why is this necessary ?

2. The syntax for the shortcut pointing to my secured DB requires inserting
the /user switch, otherwise Access defaults to the System.mdw on the user's
system, which of course denies them access. With this switch, the desired
..MDW is used. Why is this necessary ?

Both the mdb & mdw have different names and are on drives fully accessible
to all users.

"C:\Program Files\Microsoft Office\Office\MSACCESS.EXE" "\\PathTo\MYDB.mdb"
/user /wrkgrp "\\DifferentPathTo\MyMDW.mdw"

Any comments would be appreciated.

NickHK
 
Hi Nick,
-----Original Message-----
After reading the MS FAQ and Jack MacDonald's words of wisdom, security was
accomplished, but with 2 work arounds (using Access 2000):

1. It appeared impossible to actually remove Admin from the Admins group,
despite what the .MDW was telling me. Removal of all permissions from the
Admins group solved it, but why is this necessary ?
Click to expand...

It should not have been necessary. One user (at least)
needs to be a member of the Admins group. If you didn't
set up a user and add them to the Admins group, then you
wouldn't be able to remove Admin from the Admins group.
2. The syntax for the shortcut pointing to my secured DB requires inserting
the /user switch, otherwise Access defaults to the System.mdw on the user's
system, which of course denies them access. With this switch, the desired
..MDW is used. Why is this necessary ?
Click to expand...

I have never encountered this, and I don't see anything
wrong with your shortcut. Do you have more than one
version of Access installed?
"C:\Program Files\Microsoft
Click to expand...
Office\Office\MSACCESS.EXE" "\\PathTo\MYDB.mdb"
/user /wrkgrp "\\DifferentPathTo\MyMDW.mdw"
Click to expand...

Joan Wild
Access MVP
 
After reading the MS FAQ and Jack MacDonald's words of wisdom, security was
accomplished, but with 2 work arounds (using Access 2000):

1. It appeared impossible to actually remove Admin from the Admins group,
despite what the .MDW was telling me. Removal of all permissions from the
Admins group solved it, but why is this necessary ?
Click to expand...

Mea culpa. I think that my explanation of Admins is incorrect. I
intend to review my document in this area.


=======================================================
Jack MacDonald
remove UPPERCASE LETTERS from email address
Vancouver, B.C. Canada
Info about MSAccess user-level security
www.geocities.com/jacksonmacd
 
(snip)
1. It appeared impossible to actually remove Admin from the Admins group,
despite what the .MDW was telling me. Removal of all permissions from the
Admins group solved it, but why is this necessary ?
Click to expand...

Removing permissions from the Admins group is not meaningful. All members of
the Admins group of the workgroup file which was used to create the
database, have full permissions to all objects in that database, & can
re-grant themselves those permissions if someone else has removed those
permissions.

HTH,
TC
 
Back
Top